Microsoft Graph Identity Governance is the API surface that lets you automate and integrate the identity governance capabilities of Microsoft Entra ID (formerly Azure Active Directory). It helps you enforce least-privilege and zero-trust by controlling and auditing who gets access to what, for how long, and why—across employees, contractors, guests, and connected applications.
openapi: 3.1.0
info:
title: Microsoft Graph Identitygovernance
description: Needs a description.
paths:
/identityGovernance:
description: Provides operations to manage the identityGovernance singleton.
get:
tags:
- identityGovernance.identityGovernance
summary: Microsoft Graph Get identityGovernance
operationId: identityGovernance.identityGovernance.GetIdentityGovernance
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved entity
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.identityGovernance'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- identityGovernance.identityGovernance
summary: Microsoft Graph Update identityGovernance
operationId: identityGovernance.identityGovernance.UpdateIdentityGovernance
requestBody:
description: New property values
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.identityGovernance'
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.identityGovernance'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
/identityGovernance/accessReviews:
description: >-
Provides operations to manage the accessReviews property of the
microsoft.graph.identityGovernance entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Get accessReviews from identityGovernance
operationId: identityGovernance.GetAccessReviews
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewSet'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Update the navigation property accessReviews in identityGovernance
operationId: identityGovernance.UpdateAccessReviews
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewSet'
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewSet'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Delete navigation property accessReviews for identityGovernance
operationId: identityGovernance.DeleteAccessReviews
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
/identityGovernance/accessReviews/definitions:
description: >-
Provides operations to manage the definitions property of the
microsoft.graph.accessReviewSet entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph List definitions
description: >-
Get a list of the accessReviewScheduleDefinition objects and their
properties.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewset-list-definitions?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.ListDefinitions
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.accessReviewScheduleDefinitionCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Create definitions
description: Create a new accessReviewScheduleDefinition object.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewset-post-definitions?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.CreateDefinitions
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.accessReviewScheduleDefinition
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.accessReviewScheduleDefinition
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}:
description: >-
Provides operations to manage the definitions property of the
microsoft.graph.accessReviewSet entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Get accessReviewScheduleDefinition
description: >-
Read the properties and relationships of an
accessReviewScheduleDefinition object. To retrieve the instances of the
access review series, use the list accessReviewInstance API.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewscheduledefinition-get?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.GetDefinitions
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.accessReviewScheduleDefinition
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
put:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Update accessReviewScheduleDefinition
description: >-
Update an existing accessReviewScheduleDefinition object to change one
or more of its properties.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewscheduledefinition-update?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.SetDefinitions
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.accessReviewScheduleDefinition
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.accessReviewScheduleDefinition
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Delete accessReviewScheduleDefinition
description: Deletes an accessReviewScheduleDefinition object.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewscheduledefinition-delete?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.DeleteDefinitions
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: accessReviewScheduleDefinition-id
in: path
description: The unique identifier of accessReviewScheduleDefinition
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewScheduleDefinition
/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances:
description: >-
Provides operations to manage the instances property of the
microsoft.graph.accessReviewScheduleDefinition entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph List instances
description: Get a list of the accessReviewInstance objects and their properties.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewscheduledefinition-list-instances?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.definitions.ListInstances
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.accessReviewInstanceCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Create new navigation property to instances for identityGovernance
operationId: identityGovernance.accessReviews.definitions.CreateInstances
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewInstance'
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewInstance'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: accessReviewScheduleDefinition-id
in: path
description: The unique identifier of accessReviewScheduleDefinition
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewScheduleDefinition
/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}:
description: >-
Provides operations to manage the instances property of the
microsoft.graph.accessReviewScheduleDefinition entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Get accessReviewInstance
description: Read the properties and relationships of an accessReviewInstance object.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewinstance-get?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.definitions.GetInstances
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewInstance'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Update accessReviewInstance
description: >-
Update the properties of an accessReviewInstance object. Only the
reviewers and fallbackReviewers properties can be updated but the scope
property is also required in the request body. You can only add
reviewers to the fallbackReviewers property but can't remove existing
fallbackReviewers. To update an accessReviewInstance, it's status must
be InProgress.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewinstance-update?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.definitions.UpdateInstances
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewInstance'
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewInstance'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Delete navigation property instances for identityGovernance
operationId: identityGovernance.accessReviews.definitions.DeleteInstances
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: accessReviewScheduleDefinition-id
in: path
description: The unique identifier of accessReviewScheduleDefinition
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewScheduleDefinition
- name: accessReviewInstance-id
in: path
description: The unique identifier of accessReviewInstance
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewInstance
? /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers
: description: >-
Provides operations to manage the contactedReviewers property of the
microsoft.graph.accessReviewInstance entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph List contactedReviewers
description: >-
Get the reviewers for an access review instance, irrespective of whether
or not they have received a notification. The reviewers are represented
by an accessReviewReviewer object. A list of zero or more objects are
returned, including all of their nested properties.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewinstance-list-contactedreviewers?view=graph-rest-1.0
operationId: >-
identityGovernance.accessReviews.definitions.instances.ListContactedReviewers
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.accessReviewReviewerCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- identityGovernance.accessReviewSet
summary: >-
Microsoft Graph Create new navigation property to contactedReviewers for identityGovernance
operationId: >-
identityGovernance.accessReviews.definitions.instances.CreateContactedReviewers
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewReviewer'
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewReviewer'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: accessReviewScheduleDefinition-id
in: path
description: The unique identifier of accessReviewScheduleDefinition
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewScheduleDefinition
- name: accessReviewInstance-id
in: path
description: The unique identifier of accessReviewInstance
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewInstance
? /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}
: description: >-
Provides operations to manage the contactedReviewers property of the
microsoft.graph.accessReviewInstance entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Get contactedReviewers from identityGovernance
description: >-
Returns the collection of reviewers who were contacted to complete this
review. While the reviewers and fallbackReviewers properties of the
accessReviewScheduleDefinition might specify group owners or managers as
reviewers, contactedReviewers returns their individual identities.
Supports $select. Read-only.
operationId: >-
identityGovernance.accessReviews.definitions.instances.GetContactedReviewers
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewReviewer'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Update the navigation property contactedReviewers in identityGovernance
operationId: >-
identityGovernance.accessReviews.definitions.instances.UpdateContactedReviewers
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewReviewer'
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.accessReviewReviewer'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Delete navigation property contactedReviewers for identityGovernance
operationId: >-
identityGovernance.accessReviews.definitions.instances.DeleteContactedReviewers
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: accessReviewScheduleDefinition-id
in: path
description: The unique identifier of accessReviewScheduleDefinition
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewScheduleDefinition
- name: accessReviewInstance-id
in: path
description: The unique identifier of accessReviewInstance
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewInstance
- name: accessReviewReviewer-id
in: path
description: The unique identifier of accessReviewReviewer
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewReviewer
? /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count
: description: Provides operations to count the resources in the collection.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Get the number of the resource
operationId: >-
identityGovernance.accessReviews.definitions.instances.contactedReviewers.GetCount-fe5f
parameters:
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
responses:
2XX:
$ref: '#/components/responses/ODataCountResponse'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
parameters:
- name: accessReviewScheduleDefinition-id
in: path
description: The unique identifier of accessReviewScheduleDefinition
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewScheduleDefinition
- name: accessReviewInstance-id
in: path
description: The unique identifier of accessReviewInstance
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewInstance
? /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions
: description: >-
Provides operations to manage the decisions property of the
microsoft.graph.accessReviewInstance entity.
get:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph List decisions
description: >-
Retrieve the accessReviewInstanceDecisionItem objects for a specific
accessReviewInstance. A list of zero or more
accessReviewInstanceDecisionItem objects are returned, including all of
their nested properties.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/accessreviewinstance-list-decisions?view=graph-rest-1.0
operationId: identityGovernance.accessReviews.definitions.instances.ListDecisions
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.accessReviewInstanceDecisionItemCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- identityGovernance.accessReviewSet
summary: Microsoft Graph Create new navigation property to decisions for identityGovernance
operationId: identityGovernance.accessReviews.definitions.instances.CreateDecisions
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.accessReviewInstanceDecisionItem
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.accessReviewInstanceDecisionItem
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: accessReviewScheduleDefinition-id
in: path
description: The unique identifier of accessReviewScheduleDefinition
required: true
schema:
type: string
x-ms-docs-key-type: accessReviewScheduleDefinition
- name: accessReviewInstance-id
in: path
description: The unique identifier of accessReviewInstance
required: true
sc
# --- truncated at 32 KB (3423 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/identitygovernance-openapi-original.yml